Drug-Exposed Newborn / Substance-Affected Infant Reporting (CARA + State Requirements)
8 min read · Last reviewed May 23, 2026
The federal Comprehensive Addiction and Recovery Act of 2016 (CARA, P.L. 114-198) amended the Child Abuse Prevention and Treatment Act (CAPTA) at 42 USC § 5106a to require healthcare providers to notify Child Protective Services of substance-affected infants and to support the development of a Plan of Safe Care. The notification is distinct from a child-abuse report — CARA expressly clarifies that notification is not itself an allegation of abuse or neglect. HIPAA and 42 CFR Part 2 layer carefully.
What triggers the duty to notify
The CARA trigger is the birth of an "infant affected by substance abuse or withdrawal symptoms resulting from prenatal drug exposure, or a Fetal Alcohol Spectrum Disorder." The 2016 amendments broadened the original 2003 trigger from "illegal substance abuse" to all substance-affected infants regardless of legality — covering prescribed opioids, MAT medications (methadone, buprenorphine), legal medications, and alcohol exposure.
What clinicians most often miss is that CARA notification and child-abuse reporting are different statutory duties operating on different theories. The CARA notification under 42 USC § 5106a(b)(2)(B)(ii)(III) creates a Plan-of-Safe-Care pathway. The child-abuse report under state law (CA Penal Code § 11166, TX Family Code § 261.101) requires the standard reasonable-suspicion analysis. A substance-affected infant always generates CARA notification; whether it also generates a child-abuse report depends on state-specific indicators beyond the positive toxicology alone.
The clinical triggers for CARA notification:
- Positive newborn toxicology for any controlled substance
- Clinical signs of neonatal abstinence syndrome (NAS) or neonatal opioid withdrawal syndrome (NOWS)
- Documented maternal opioid use, MAT, or polysubstance use during pregnancy
- Fetal Alcohol Spectrum Disorder findings at delivery
- Withdrawal symptoms attributable to maternal substance use of any kind
Who must report
The CARA notification duty attaches to the healthcare provider responsible for the infant's care. In practice, this means:
- Attending obstetricians and neonatologists at delivery
- Hospital-based pediatricians and family medicine physicians
- Labor & delivery nurses and neonatal nurses
- Hospital social workers
- Hospital administrators with regulatory oversight roles
State implementation varies on which member of the care team makes the notification. California ACL 17-49 designates the attending physician or designee; Florida F.S. § 39.201(2)(b) puts the duty on the practitioner attending the birth.
Where the substance-exposure scenario also triggers a state mandatory child-abuse reporting duty, the standard reporter classes apply — every licensed clinician in the encounter is a potential mandated reporter under the state statute.
State-by-state framework
CARA at 42 USC § 5106a(b)(2)(B)(ii)(III) is a federal funding-condition statute; each state implements through state legislation. The top 10 states by population:
| State | Reporter Class | Plan of Safe Care Implementation | Statute / Policy | |---|---|---|---| | California | Attending physician at delivery | ACL 17-49 / SB 427 | H&S Code § 123605; W&I § 16501.4 | | Texas | Healthcare practitioner | DFPS protocol; HB 1549 (2017) | TX Family Code § 261.001(4)(A); § 261.101 | | Florida | Practitioner attending birth | DCF Operating Procedure 175-28 | F.S. § 39.201(2)(b) | | New York | Healthcare practitioner | OCFS Administrative Directive 17-OCFS-ADM-19 | NY Soc. Serv. § 413; OCFS-AD-17-19 | | Pennsylvania | Healthcare provider | Act 54 of 2018; 23 Pa.C.S. § 6386 | 23 Pa.C.S. § 6386 | | Illinois | Healthcare professional | DCFS Procedure 300; PA 99-0801 | 325 ILCS 5/4; 89 Ill. Adm. Code § 300 | | Ohio | Healthcare professional | ORC § 2151.421(B)(2); HB 49 (2017) | ORC § 2151.421 | | Georgia | Reproductive-health provider | DFCS Policy 5.5 | OCGA § 19-7-5; DFCS Policy 5.5 | | North Carolina | Healthcare practitioner | NCDHHS DSS-1402 protocol | NCGS § 7B-301 | | Michigan | Healthcare professional | DHHS Policy NB-115 | MCL 722.623a |
Every state and the District of Columbia have implemented CARA notification provisions, though terminology and procedural specifics differ. Several states (CA, NY, PA, IL) issued administrative guidance explicitly clarifying that the CARA notification is not a child-abuse allegation and should not be reported through the abuse-allegation track when the only finding is substance exposure to medically supervised MAT.
Timeline
CARA notification at birth is the operative timeline — notification to CPS at or shortly after delivery, before the infant is discharged. State protocols vary on whether the notification must occur within 24, 48, or 72 hours.
The Plan of Safe Care itself is developed in the days and weeks following notification — CARA at 42 USC § 5106a(b)(2)(B)(iii) requires states to "monitor" the plan but does not impose a fixed federal completion deadline. California ACL 17-49 expects a draft plan before infant discharge.
Where the scenario also triggers a state child-abuse report (clinical findings beyond substance exposure indicating actual harm), the abuse-report timeline runs in parallel — typically immediate phone with 24-72 hour written follow-up per state.
What to report and how
A CARA notification should include the infant's identifying information; the substance exposure observed (toxicology results, clinical findings, NAS/NOWS assessment); the substances and exposure context (prescribed MAT, illicit substances, alcohol, polysubstance); the maternal treatment context (engagement in MAT, prenatal care history, substance use disorder diagnosis); known caregivers and family situation; and the healthcare team's care plan and pending consultations.
What the notification should not include — when made through the CARA Plan-of-Safe-Care pathway rather than the abuse-allegation pathway — is an allegation of abuse or neglect. The 2016 amendments and most state implementations were explicit on this point to address concerns that mothers in MAT would avoid prenatal care if every notification triggered an abuse investigation.
Federal vs state framework
The federal scaffolding:
- CAPTA (42 USC § 5106a) — the core federal statute conditioning child-welfare funding on state mandatory-reporter regimes.
- CARA (P.L. 114-198, 2016) — amended CAPTA to broaden the substance-affected-infant trigger beyond "illegal substance abuse" to all substance exposure, to require Plan of Safe Care development, and to require the plan to address the family unit.
- Family First Prevention Services Act (FFPSA, P.L. 115-123, 2018) — expanded Title IV-E funding for prevention services, including substance use disorder treatment for parents, as part of Plan of Safe Care implementation.
- SUPPORT Act (P.L. 115-271, 2018) — funded state implementation of Plans of Safe Care and required HHS to issue guidance.
State implementation carries the operative duty. The federal framework conditions funding on state regimes; the clinician's notification duty lives in state law.
Penalties for failure to notify
Failure to make a CARA notification exposes the provider to the same set of state-law penalties as failure to make a mandatory child-abuse report — because most states implement CARA notification as a subset of, or parallel to, the existing mandatory-reporter framework:
- California — Failure to report under Penal Code § 11166(c) is a misdemeanor; civil liability attaches. CARA-specific failure under W&I § 16501.4 can support state DSS sanctions on the facility.
- Texas — Failure to report under Family Code § 261.109 is a Class A misdemeanor.
- Florida — F.S. § 39.205 imposes felony exposure where failure resulted in injury.
- Illinois — 325 ILCS 5/4 imposes Class A misdemeanor for first offense, Class 4 felony for subsequent.
- State health-facility licensure — most states' hospital licensing surveys evaluate CARA notification protocols; deficiencies appear on facility survey reports and can support condition-of-participation findings for CMS.
License discipline through the state medical or nursing board is the practical professional exposure.
HIPAA permissible disclosure
The CARA notification falls within multiple HIPAA permissive-disclosure carve-outs:
- 45 CFR § 164.512(b)(1)(ii) — disclosure to a public health authority authorized by law to receive reports of child abuse or neglect; CARA-implementing CPS agencies fit this category.
- 45 CFR § 164.512(c) — disclosure about a victim of abuse, neglect, or domestic violence to a government authority authorized by law.
- 45 CFR § 164.512(b)(1)(i) — disclosure to a public health authority for disease prevention and surveillance (used in some states that locate CARA notification in the public-health track rather than the CPS track).
The 42 CFR Part 2 layer requires careful handling. The infant's clinical information at delivery is not generally Part 2-protected. The mother's substance use disorder treatment history at a Part 2 program is — see the d3rx behavioral health 42 CFR Part 2 guide. SAMHSA's Notice to Providers on CARA confirms that Part 2 does not prohibit the CARA notification of the infant's exposure status, but disclosures about the mother's Part 2 treatment require Part 2-compliant consent or a court order.
The minimum-necessary standard at 45 CFR § 164.502(b) applies. Log the disclosure under 45 CFR § 164.528 where applicable; § 164.528(a)(1)(viii) generally exempts public-health disclosures from the accounting requirement, but the disclosure should still be documented in the chart.
How d3rx fits
The d3rx compliance binder maintains the substance-affected-infant workflow inside the disclosure module: the CARA notification template by state, the Plan-of-Safe-Care intake checklist, the 42 CFR Part 2 boundary analysis for maternal treatment information, the NAS/NOWS clinical documentation template, the multi-agency coordination workflow, and the accounting-of-disclosures entry. d3rx is an administrative documentation aid. It does not file the notification, does not coordinate the Plan of Safe Care, and does not replace counsel.
D3rx compliance guides are administrative documentation aids. They do not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program.
Step 1 · Get the binder
Get the d3rx compliance binder for your practice
Pre-filled to address the gaps this guide covers — Drug-Exposed Newborn / Substance-Affected Infant Reporting (CARA + State Requirements). We will email you the section preview and your binder intake link.
No PHI required. We use your email to send the binder preview and intake link only.
Frequently asked
My patient is in MAT (medication-assisted treatment) for opioid use disorder. Her baby tests positive at delivery. Is this a CPS report?
It is a CARA notification — which is not the same as an abuse report. CARA at 42 USC § 5106a(b)(2)(B)(ii)(III) requires healthcare providers to notify CPS of a substance-affected infant for purposes of developing a Plan of Safe Care, regardless of whether the substance is illicit, prescribed, or part of treatment. The 2016 CARA amendment explicitly clarified that the notification is not itself a finding of abuse or neglect. Medically supervised MAT exposure should be notified for the Plan of Safe Care without an abuse allegation.
Does CARA preempt 42 CFR Part 2 confidentiality for the mother's substance use treatment?
No. The mother's Part 2 substance use disorder treatment records remain protected under 42 CFR § 2.13. The CARA notification concerns the infant's substance exposure as observed at delivery — which is the infant's clinical information, not the mother's Part 2 treatment record. Communications about the mother's MAT or treatment program back to CPS as part of a Plan of Safe Care generally require either the mother's Part 2-compliant consent or one of the limited Part 2 exceptions. Counsel typically maps the Part 2 boundary before the multi-agency Plan of Safe Care meeting.
What is a 'Plan of Safe Care' and who develops it?
A Plan of Safe Care is a CARA-mandated multidisciplinary plan that addresses the health and substance use treatment needs of the infant, the affected caregiver, and any other affected family members. It is developed by the state CPS agency in coordination with the healthcare provider, the substance use treatment provider, and other relevant agencies. CARA at 42 USC § 5106a(b)(2)(B)(iii) requires states to monitor implementation of the plan. The healthcare provider's role is notification at delivery and ongoing clinical input — not solo authorship of the plan.
Is positive maternal urine toxicology at delivery a reportable event by itself?
It depends on the state and on whether the exposure produced effects in the newborn. California Health & Safety Code § 123605 specifically prohibits positive maternal toxicology alone, without other indicators, from being treated as child abuse — but does not exclude CARA notification for a substance-affected infant. Texas Family Code § 261.001(4)(A) and several state interpretations are stricter, treating positive newborn toxicology as a reportable indicator. The cleaner posture is CARA Plan-of-Safe-Care notification for any substance-affected infant, with abuse-report analysis under state law layered separately.
If the mother is using prescribed methadone for OUD, do I still notify?
Yes — and the notification expressly should not be treated as an abuse allegation. CARA's 2016 amendments (P.L. 114-198) clarified that the notification covers infants affected by legal substances, including prescribed medications taken as directed for treatment of substance use disorder. The Plan of Safe Care is the policy vehicle to coordinate care for the parent-infant dyad, not to penalize medically appropriate MAT. Document the MAT context and the prescribed-medication status prominently in the notification and in the chart.
Are fathers and other caregivers included in the Plan of Safe Care?
Yes. The 2016 CARA amendments expanded the focus from infant-only to the infant 'and family.' 42 USC § 5106a(b)(2)(B)(iii) requires the Plan of Safe Care to address the needs of the infant, the mother, the father, and any other affected family member. State implementation varies — California ACL 17-49 and Florida F.S. § 39.201(2)(b) explicitly include the broader family in the plan. The healthcare provider's notification should identify all caregivers known at the time of delivery.
Turn this into a review-ready binder
The Security Risk Analysis is where this guide becomes documentation you can actually hand to a reviewer — assembled into one review-ready binder. Source-grounded, citation-linked, and explicit about what it does and does not do.
Editorial process. This guide was drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and edited by the D3rx team for restraint and source fidelity. A named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged to verify citations — see the team page for status. Until that reviewer engagement is finalized, this page does not claim credentialed review.
This article is an administrative documentation aid. It does not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program. References cited link to primary sources at HHS, OCR, CMS, the Code of Federal Regulations, NIST, and state regulators.
D3rx is a healthcare-billing and compliance research aid maintained by D3rx Inc. Articles are drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and reviewed for restraint and source fidelity by the D3rx team.
Reviewer status: a named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged. Until that engagement is finalized, this page does not claim credentialed review.
- 45 CFR § 164.512(b)(1)(ii)https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.512
- Notice to Providers on CARAhttps://www.samhsa.gov/
- 45 CFR § 164.502(b)https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502
- 45 CFR § 164.528https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.528
Sources verified as of May 23, 2026
This guide is a plain-English summary maintained by D3rx for healthcare practice administrators. It is not legal advice, medical advice, or accounting advice. The authoritative source is the cited regulation or agency document. Always confirm with qualified counsel before acting on a specific compliance question affecting your practice.
Related Guides
Mandatory Child Abuse Reporting for Healthcare Providers (Federal + 50-State Overview)
9 min readSpecialty ComplianceBehavioral Health Compliance: 42 CFR Part 2 + HIPAA Together
8 min readState ComplianceCalifornia Healthcare Compliance: CMIA + HIPAA — Where They Diverge
9 min readRelated across the archive
- ComplianceMandatory Child Abuse Reporting for Healthcare Providers (Federal + 50-State Overview)Federal CAPTA + state mandates: who reports, what triggers the duty, timeline, penalties, and the 45 CFR § 164.512(b)/(c) HIPAA carve-outs that permit disclosure to CPS.
- ComplianceCalifornia Healthcare Compliance: CMIA + HIPAA — Where They DivergeCalifornia's CMIA (Civ. Code §§ 56–56.37) vs HIPAA: stricter consent, 5-working-day inspection / 15-day copy access, private right of action, up to $25k per knowing-and-willful violation + misdemeanor exposure.
- ComplianceHIPAA Subpoena Response: Court Order vs Administrative Subpoena (45 CFR § 164.512)Court order, civil subpoena, grand-jury subpoena, DEA administrative demand — each triggers a different HIPAA response path. Identify the type before you produce a single record.
- Glossary42 CFR Part 2 (SUD Records)Federal regulation providing heightened confidentiality protection for substance use disorder treatment records.
- ComplianceNotice of Privacy Practices (NPP) Template — 2026A 2026 Notice of Privacy Practices template aligned to 45 CFR 164.520, with every required header, the post-Dobbs reproductive-health content, and CMIA/HB 300 carveouts.
- SRAHIPAA Security Rule vs Privacy Rule: A Plain-English MapWhat the Security Rule at 45 CFR Part 164 Subpart C does, what the Privacy Rule at Subpart E does, where they overlap, and which rule the SRA actually answers to.
- RegulationHIPAA Accounting of Disclosures (45 CFR 164.528)Individuals may request an accounting of disclosures of their PHI made by a covered entity in the prior six years, with a defined list of exclusions.
- BillingWhat to Do When a Payer Says You're UnderbillingGot a letter saying you're underbilling? Here's what it actually means, whether you should worry, and what action to take.